Increasing peer privacy by forwarding a label

• US 20030206638A1
• Filed: 05/01/2002
• Published: 11/06/2003
• Est. Priority Date: 05/01/2002
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Xu, Zhichen, Xiao, Li
• Application Number:
  US10/135,413
• Publication Number:
  US 20030206638A1
• Time in Patent Office: Days
• US Class Current: 380/281
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14

Abstract

In a method for increasing peer privacy, a path for information is formed from a provider to a requestor through a plurality of peers in response to a received request for the information. Each peer of the plurality of peers receives a respective set-up message comprising of a predetermined label and an identity of a next peer for the information. The information is transferred over the path in a message, where the message comprises a message label configured to determine a next peer according to the path in response to the message label matching the previously received predetermined label.

Claims

1. A method of increasing privacy in a network system, comprising:

selecting a label in response to a request for information, said label configured to indicate a pre-determined path through a plurality of peers for said information;

forwarding said label to form a communication channel through said plurality of peers; and

transmitting said information through said communication channel.

2. The method according to claim 1, further comprising:

retrieving a subsequent peer according to said path in response to receiving said label at a receiving peer;

transmitting said label to said subsequent peer according to said path; and

opening a persistent connection from said receiving peer to said subsequent peer as a link of said communication channel.

3. The method according to claim 2, wherein said retrieval of said next peer further comprises:

searching a table of said receiving peer with said label as a search index.

4. The method according to claim 1, further comprising:

generating a plurality of paths, wherein each path is configured to include a combination of said plurality of peers and each path is also configured to have a respective label;

determining a sub-plurality of paths associated with a peer;

determining a plurality of subsequent peers for said peer, each subsequent peer following said peer according to a respective path of said sub-plurality of paths;

associating each subsequent peer with said respective label of each path of said sub-plurality of paths; and

transmitting each subsequent peer and said respective label to said peer.

5. The method according to claim 4, further comprising:

updating a hash table of said peer with each subsequent peer and said respective label.

6. The method according to claim 1, further comprising:

generating an encryption key;

encrypting said encryption key with a public key of a provider peer; and

encrypting said encryption key with a public key of a requester peer.

7. The method according to claim 6, further comprising:

selecting a path from a global path table;

determining a first peer subsequent to said provider peer according to said path;

forming a retrieval message, said retrieval message comprising;

said label;

said encryption key encrypted with said public key of said provider peer;

said encryption key encrypted with said public key of said requestor peer;

an identity of a first peer following said provider peer according to said path.

8. The method according to claim 7, further comprising:

re-transmitting said label to said first peer in response to receiving said retrieval message.

9. The method according to claim 8, further comprising:

forming a persistent connection between said first peer and said provider peer as a link of said communication channel in response to receiving said label.

10. The method according to claim 9, further comprising:

searching a table of said first peer by using said label as a search index;

retrieving a subsequent peer to said first peer from said hash table; and

transmitting said label to said subsequent peer.

11. A method of increasing privacy in a network, comprising:

generating a plurality of paths, wherein each path is configured to include a number of peers and each path is configured to have a respective path name;

determining a sub-plurality of paths associated with a selected peer;

determining a plurality of subsequent peers, each subsequent peer following said selected peer according to a respective path of said sub-plurality of paths; and

creating a plurality of path segments for said selected peer, each path segment comprising each subsequent peer of each path of said sub-plurality of paths and said respective path name of each path.

12. The method according to claim 11, further comprising:

receiving said plurality of path segments; and

storing said plurality of path segments in a table of said selected peer, wherein said table is configured to be searched by using a selected path name to retrieve a corresponding subsequent peer.

13. The method according to claim 11, further comprising:

receiving a request for information from a requester peer;

searching for said information; and

notifying said requestor peer of a non-availability of said information in response to a determination of non-availability of said information.

14. The method according to claim 11, further comprising:

receiving a request for information from a requestor peer;

searching for said information; and

transmitting a retrieval message to a provider peer in response to the determination of availability of said information.

15. The method according to claim 14, further comprising:

generating an encryption key;

encrypting said encryption key with a public key of said requester peer; and

encrypting said encryption key with a public key of said provider peer.

16. The method according to claim 15, further comprising:

selecting a transaction path from said plurality of paths; and

retrieving a respective path name of said transaction path.

17. The method according to claim 16, wherein said retrieval message comprises:

said respective path name of said transaction path;

said encryption key encrypted with said public key of said requestor peer;

said encryption key encrypted with said public key of said provider peer; and

said identity of a first peer following said provider peer according to said transaction path.

18. The method according to claim 17, further comprising:

transmitting a message to said first peer, said message comprising said respective path name; and

forming a persistent connection with said provider peer in response to receiving said message at said first peer.

19. The method according to claim 18, further comprising:

searching a table of said first peer with said respective path name as a search index into said table;

retrieving a peer subsequent to said first peer from said table; and

transmitting said respective path name to said peer subsequent to said first peer.

20. The method according to claim 19, further comprising:

receiving a respective path name at a current peer; and

forming a current persistent connection with a peer previous to said current peer according to said path.

21. The method according to claim 20, further comprising:

searching a table of said current peer with said respective path name as a current search index;

retrieving a peer following said current peer according to said path; and

transmitting said respective path name to said peer following said current peer.

22. A method of communicating with increased privacy, comprising:

transmitting a label for a selected path;

receiving said label at a current peer;

forming a persistent connection link of a communication channel from said current peer to a previous peer;

retrieving an identity of a peer following said current peer from a table of said current peer with said label as a search index; and

transmitting said label to said peer following said current peer.

23. The method according to claim 22, further comprising:

receiving said label at a requestor peer;

forming a last persistent connection link of said communication channel from said requester peer to a peer previous to said requester peer according to said selected path; and

notifying a provider peer of a completion of said communication channel between said requestor peer and a provider peer.

24. The method according to claim 23, further comprising:

transmitting information encrypted with an encryption key through said communication channel; and

transmitting said encryption key encrypted with a public key of said requestor peer.

25. A system for increasing privacy, comprising:

a plurality of peers;

a directory; and

a privacy module executing on said directory, wherein said privacy module is configured to select a label in response to a request for information, said label configured to indicate a pre-determined path through a plurality of peers for said information, to forward said label to form a communication channel through said plurality of peers, and to transmit said information through said communication channel.

26. The system according to claim 25, further comprising:

a peer privacy module configured to be executed on each of the peers, wherein said peer privacy module is configured to retrieve a subsequent peer according to said path in response to receiving said label, to transmit said label to said subsequent peer according to said path, and to open a persistent connection from said receiving peer to said subsequent peer as a link of said communication channel.

27. The system according to claim 26, the peer privacy module is further configured to search a table with said label as a search index.

28. The system according to claim 25, wherein said privacy module is configured to generate a plurality of paths, wherein each path is configured to include a combination of said plurality of peers and each path is also configured to have a respective label, to determine a sub-plurality of paths associated with a peer, and to determine a plurality of subsequent peers for said peer, each subsequent peer following said peer according to a respective path of said sub-plurality of paths.

29. The system according to claim 28, wherein said privacy module is configured to associate each subsequent peer with said respective label of each path of said sub-plurality of paths and to transmit each subsequent peer and said respective label to said peer.

30. The system according to claim 29, wherein said peer privacy module is configured to update a hash table of said peer with each subsequent peer and said respective label.

31. The system according to claim 25, wherein said privacy module is configured to generate an encryption key, to encrypt said encryption key with a public key of a provider peer, and to encrypt said encryption key with a public key of a requestor peer.

32. The system according to claim 31, wherein said privacy module is configured to select a path from a global path table, to determine a first peer subsequent to said provider peer according to said path, and to form a retrieval message comprising:

said label;

said encryption key encrypted with said public key of said provider peer;

said encryption key encrypted with said public key of said requestor peer; and

an identity of a first peer following said provider peer according to said path.

33. A system for increasing privacy, comprising:

a plurality of peers;

a directory; and

a privacy module executing on said directory, wherein said privacy module is configured to generate a plurality of paths, wherein each path is configured to include a number of peers and each path is configured to have a respective path name, to determine a sub-plurality of paths associated with a selected peer, to determine a plurality of subsequent peers, each subsequent peer following said selected peer according to a respective path of said sub-plurality of paths, and to create a plurality of path segments for said selected peer, each path segment comprising each subsequent peer of each path of said sub-plurality of paths and said respective path name of each path.

34. The system according to claim 33, further comprising:

a peer privacy module executing on each of the peers of said plurality of peers, said peer privacy module configured to receive said plurality of path segments and to store said plurality of path segments in a table of said selected peer, wherein said table is configured to be searched by using a selected path name to retrieve a corresponding subsequent peer.

35. The system according to claim 33, wherein said privacy module is configured to receive a request for information from a requestor peer and to notify said requester peer of a non-availability of said information in response to a determination of non-availability of said information.

36. The system according to claim 33, wherein said privacy module is configured to receive a request for information from a requestor peer and to transmit a retrieval message to a provider peer in response to a determination of availability of said information.

37. The system according to claim 36, wherein said privacy module is configured to generate an encryption key, to encrypt said encryption key with a public key of said requestor peer, and to encrypt said encryption key with a public key of said provider peer.

38. The system according to claim 33, wherein said privacy module is configured to select a transaction path from said plurality of paths and to retrieve respective path name of said path.

39. An apparatus for communicating with increased privacy, comprising:

means for transmitting a label for a selected path;

means for receiving said label at a current peer;

means for forming a persistent connection link of a communication channel from said current peer to a previous peer;

means for retrieving an identity of a peer following said current peer from a table of said current peer with said label as a current search index; and

means for transmitting said label to said peer following said current peer.

40. The apparatus according to claim 39, further comprising:

means for receiving said label at a requestor peer;

means for forming a last persistent connection link of said communication channel from said requestor peer to a peer previous to said requestor peer according to said selected path; and

means for notifying a provider peer of a completion of said communication channel between said requestor peer and a provider peer.

41. The apparatus according to claim 40, further comprising:

means for transmitting information encrypted with an encryption key through said communication channel; and

means for transmitting said encryption key encrypted with a public key of said requester peer.

42. An apparatus for increasing privacy in a network system, comprising:

means for selecting a label in response to a request for information, said label configured to indicate a predetermined path through a plurality of peers for said information;

means for forwarding said label to form a communication channel through said plurality of peers; and

means for transmitting said information through said communication channel.

43. The apparatus according to claim 42, further comprising:

means for retrieving a subsequent peer according to said path in response to receiving said label at a receiving peer;

means for transmitting said label to said subsequent peer according to said path; and

means for opening a persistent connection from said receiving peer to said subsequent peer as a link of said communication channel.

44. The apparatus according to claim 43, further comprising:

means for searching a table of said receiving peer with said label as a search index.

45. The apparatus according to claim 42, further comprising:

means for generating a plurality of paths, wherein each path is configured to include a combination of said plurality of peers and each path is also configured to have a respective label;

means for determining a sub-plurality of paths associated with a peer;

means for determining a plurality of subsequent peers for said peer, each subsequent peer following said peer according to a respective path of sub-plurality of paths;

means for associating each subsequent peer with said respective label of each path of sub-plurality of paths; and

means for transmitting each subsequent peer and said respective label to said peer.

46. The apparatus according to claim 45, further comprising:

means for updating a hash table of said peer with each subsequent peer and said respective label.

47. The apparatus according to claim 42, further comprising:

means for generating an encryption key;

means for encrypting said encryption key with a public key of a provider peer; and

means for encrypting said encryption key with a public key of a requestor peer.

48. The apparatus according to claim 47, further comprising:

means for selecting a path from a global path table;

means for determining a first peer subsequent to said provider peer according to said path; and

means for forming a retrieval message comprising;

said label;

said encryption key encrypted with said public key of said provider peer;

said encryption key encrypted with said public key of said requestor peer; and

an identity of a first peer following said provider peer according to said path.

49. The apparatus according to claim 48, further comprising:

means for re-transmitting said label to said first peer in response to receiving said retrieval message.

50. The apparatus according to claim 49, further comprising:

means for forming a persistent connection between said first peer and said provider peer as a link of said communication channel in response receiving said label.

51. The apparatus according to claim 50, further comprising:

means for searching a table of said first peer by using said label as a search index;

means for retrieving a subsequent peer to said first peer from said hash table; and

means for transmitting said label to said subsequent peer.

52. An apparatus for increasing privacy in a network, comprising:

means for generating a plurality of paths, wherein each path is configured to include a number of peers and each path is configured to have a respective path name;

means for determining a sub-plurality of paths associated with a selected peer;

means for determining a plurality of subsequent peers, each subsequent peer following said selected peer according to a respective path of said sub-plurality of paths; and

means for creating a plurality of path segments for said selected peer, each path segment comprising each subsequent peer of each path of said sub-plurality of paths and said respective path name of each path.

53. The apparatus according to claim 52, further comprising:

means for receiving said plurality of path segments; and

means for storing said plurality of path segments in a table of said selected peer, wherein said table is configured to be searched by using a selected path name to retrieve a corresponding subsequent peer.

54. The apparatus according to claim 52, further comprising:

means for receiving a request for information from a requester peer;

means for searching for said information; and

means for notifying said requester peer of a non-availability of said information in response to a determination of non-availability of said information.

55. The apparatus according to claim 52, further comprising:

means for receiving a request for information from a requestor peer;

means for searching for said information; and

means for transmitting a retrieval message to a provider peer in response to a determination of availability of said information.

56. The apparatus according to claim 55, further comprising:

means for generating an encryption key;

means for encrypting said encryption key with a public key of said requester peer; and

means for encrypting said encryption key with a public key of said provider peer.

57. The apparatus according to claim 56, further comprising:

means for selecting a transaction path from said plurality of paths; and

means for retrieving respective path name of said transaction path.

58. The apparatus according to claim 57, further comprising:

means for transmitting a message to said first peer, said message comprising said respective path name; and

means for forming a persistent connection with said provider peer in response to receiving said message at said first peer.

59. The apparatus according to claim 58, further comprising:

means for searching a table of said first peer with said respective label as a search index into said table;

means for retrieving a peer subsequent to said first peer from said table; and

means for transmitting said respective label to said peer subsequent to said first peer.

60. The apparatus according to claim 59, further comprising:

means for receiving respective label at a current peer; and

means for forming a current persistent connection with a peer previous to said current peer according to said path.

61. The apparatus according to claim 60, further comprising:

means for searching a table of said current peer with said respective label as a current search index;

means for retrieving a peer following said current peer according to said path; and

means for transmitting said respective label to said peer following said current peer.